$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa File: AC270A727D0711ED8181DA7FC4F9AE02.roa (raw, json) Hash identifier: iIeWWLVIFJDjrG1ibZP/xl+WAjIK44IJWqOkBlQGCcU= Subject key identifier: 04:D2:1F:3C:D7:10:CC:84:80:87:96:58:BB:D3:52:E8:54:E6:BF:5E Certificate issuer: /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Certificate serial: 01AD Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa Signing time: Fri 07 Mar 2025 02:48:26 +0000 ROA not before: Fri 07 Mar 2025 02:48:26 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136615 IP address blocks: 203.201.183.0/24 maxlen: 24 203.201.183.0/28 maxlen: 28 203.201.183.16/28 maxlen: 28 203.201.183.32/28 maxlen: 28 203.201.183.48/28 maxlen: 28 203.201.183.64/26 maxlen: 26 203.201.183.128/26 maxlen: 26 203.201.183.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8F36, serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD Validity Not Before: Mar 7 02:48:26 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca5e7a-94c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:93:60:e9:a3:82:00:e9:cf:5c:b5:b4:ef: 52:f2:c1:ea:82:fd:b2:00:cd:30:78:74:df:b6:1b: 9b:58:2c:bb:89:4c:fb:a7:6f:1b:e1:0c:dd:97:7d: cf:fc:6c:9f:3e:23:a8:d2:f2:d9:c2:b0:9d:b1:6a: 51:79:76:4d:a0:ed:d5:f9:bd:38:40:d4:40:ed:dc: 89:ec:1e:62:30:12:40:11:bf:65:10:23:9a:b3:c7: c6:8e:91:90:a1:a0:3a:82:85:94:72:f9:9d:c3:db: 8f:54:f1:1e:d5:4e:91:7e:c0:0a:2a:15:4a:bd:2d: 6d:04:26:1f:d9:76:58:09:df:4d:bf:84:86:16:24: 39:bf:78:d5:65:52:ab:26:a6:6f:b1:d0:d3:5a:92: 28:df:cf:4f:4f:a1:47:c0:b3:6f:23:bb:b5:4a:fa: d3:c7:c4:e1:dd:44:5f:04:ba:3a:90:a1:2b:7d:ea: 96:04:0b:3e:17:53:a4:53:ce:ae:61:fd:16:ce:37: bf:64:83:8d:9b:89:3d:8f:8b:b9:ee:29:7f:08:04: ba:03:cb:75:85:d3:e5:f1:c4:bf:94:41:50:83:20: 13:f7:1b:15:92:f9:bf:5e:78:0f:43:30:20:ec:ee: 85:86:48:91:81:1a:19:91:be:f7:d5:4c:ec:3f:a1: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:1F:3C:D7:10:CC:84:80:87:96:58:BB:D3:52:E8:54:E6:BF:5E X509v3 Authority Key Identifier: keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.201.183.0/24 Signature Algorithm: sha256WithRSAEncryption 48:43:47:61:d3:8d:ca:89:cd:33:a6:28:80:09:b9:4a:68:00: 39:e0:36:b7:37:ee:ac:c3:ae:9a:40:cd:93:00:03:20:86:1c: c0:20:43:8d:7b:aa:07:cb:d0:95:ea:38:2e:9b:2c:0c:46:f1: 05:aa:b6:14:03:f3:8c:58:e6:d8:af:ff:05:08:25:6f:f5:b5: 92:e9:55:5c:c2:46:72:a0:10:a3:7f:3b:0e:89:9b:61:55:cf: 53:28:32:b3:f8:38:16:b0:f9:65:51:49:80:c5:c3:cc:47:84: 3c:00:0e:a5:07:1a:1b:53:03:f8:30:45:2e:04:1a:86:02:56: d3:00:12:c1:42:4d:5b:ff:46:84:a8:de:64:49:a9:ca:27:db: a7:d5:60:44:e0:4f:02:49:ec:e9:41:20:e4:30:dd:80:11:af: 5c:39:64:a3:e9:79:30:39:b1:ba:51:f0:ea:a8:ea:20:d9:62: a5:1c:cb:26:09:d8:ed:56:db:6e:d9:c3:c4:8d:18:48:2c:f7: ae:f2:f4:f8:b4:2f:56:62:51:a9:12:08:f2:58:75:a1:7d:d9: 63:dd:45:df:a5:18:69:3b:57:b1:1f:70:e4:ef:aa:09:83:bf: a9:4f:1d:3e:08:ee:2c:a7:77:9f:20:de:13:c2:c7:0c:28:e8: 37:8f:21:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThGMzYxMTAvBgNVBAUTKDM0RDdENkQ0NDFDMzJEN0M4NzE0MkU5RkU1QzdFQkM0 RjQ3OUIwQ0QwHhcNMjUwMzA3MDI0ODI2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNWU3YS05NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUOTYOmjggDpz1y1tO9S8sHqgv2yAM0weHTfthubWCy7iUz7p28b4Qzdl33P /GyfPiOo0vLZwrCdsWpReXZNoO3V+b04QNRA7dyJ7B5iMBJAEb9lECOas8fGjpGQ oaA6goWUcvmdw9uPVPEe1U6RfsAKKhVKvS1tBCYf2XZYCd9Nv4SGFiQ5v3jVZVKr JqZvsdDTWpIo389PT6FHwLNvI7u1SvrTx8Th3URfBLo6kKErfeqWBAs+F1OkU86u Yf0Wzje/ZIONm4k9j4u57il/CAS6A8t1hdPl8cS/lEFQgyAT9xsVkvm/XngPQzAg 7O6FhkiRgRoZkb731UzsP6FG3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFATSHzzX EMyEgIeWWLvTUuhU5r9eMB8GA1UdIwQYMBaAFDTX1tRBwy18hxQun+XH68T0ebDN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEYzNi8yNDlGNDE0NjdE MDIxMUVEOUM1RDdENjJDNEY5QUUwMi9OTmZXMUVIRExYeUhGQzZmNWNmcnhQUjVz TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05OZlcxRUhETFh5SEZDNmY1Y2ZyeFBSNXNNMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThGMzYvMjQ5RjQxNDY3RDAyMTFFRDlDNUQ3RDYyQzRGOUFFMDIvQUMyNzBBNzI3 RDA3MTFFRDgxODFEQTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLybcwDQYJKoZIhvcNAQELBQADggEBAEhDR2HTjcqJzTOm KIAJuUpoADngNrc37qzDrppAzZMAAyCGHMAgQ417qgfL0JXqOC6bLAxG8QWqthQD 84xY5tiv/wUIJW/1tZLpVVzCRnKgEKN/Ow6Jm2FVz1MoMrP4OBaw+WVRSYDFw8xH hDwADqUHGhtTA/gwRS4EGoYCVtMAEsFCTVv/RoSo3mRJqcon26fVYETgTwJJ7OlB IOQw3YARr1w5ZKPpeTA5sbpR8Oqo6iDZYqUcyyYJ2O1W227Zw8SNGEgs967y9Pi0 L1ZiUakSCPJYdaF92WPdRd+lGGk7V7EfcOTvqgmDv6lPHT4I7iynd58g3hPCxwwo 6DePIXM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:32 2025 by rpki-client